PDPL Customer Information Notice

The Personal Data Protection Law No. 6698, regulations, communiqués, guidelines, decisions, announcements, etc., secondary regulations and practices published in this context, in accordance with the "Personal Data Protection Law" ("PDPL") as a "Data Controller", with registration number 93503 at the İzmir Trade Registry Office, tax identification number 8180115227 at the Şirinyer Tax Office, and located at ZAFER MAH. 2355 SK. NO: 13 BUCA/ İZMİR, we, TAN SU ÜRÜNLERİ SANAYİ TİCARET VE PAZARLAMA LTD.ŞTİ. ("Company"), are utmost careful to ensure the security of your personal data. Accordingly, we process your personal data within the scope explained below and within the limits prescribed by the PDPL.

Processed Personal Data

The personal data processed by us or through other collection methods listed below for the purpose of creating electricity subscription, managing subscription processes are as follows:

Purposes of Processing Personal Data

Your personal data is processed by our company, TAN SU ÜRÜNLERİ SANAYİ TİCARET VE PAZARLAMA LTD.ŞTİ., within the scope of our company's activities.

• To fulfill the obligations specified in the Personal Data Protection Law No. 6698 and the regulations, decisions, announcements, and practices of the Personal Data Protection Board.
• To fulfill our obligations as specified in the Law on the Protection of the Consumer No. 6502 and the regulations, decisions, announcements, and practices of relevant public institutions and organizations.
• To comply with the specified legislation and regulations, to follow up and execute legal affairs. 
• To provide information requested by the relevant/authorized public institutions and organizations when necessary.
• The execution of sales processes, operations, post-sales support, and customer relationship services between the Customer and the Company.
• The conduct and supervision of business activities and risk management processes.
• Receiving and evaluating suggestions for the improvement of business processes.
• Conducting our company's storage and archiving activities.
• Ensuring business continuity for our company.
• Managing financial and accounting affairs.

They are processed in accordance with the purposes specified in the PDPL, in compliance with the law, fairness rules, and in a manner that is always relevant, limited, and proportionate to these purposes.

Kişisel Verilerin İşlenmesinin Hukuki Sebepleri ve Verilerin Aktarılması

Your personal data is processed based on one or more of the legal grounds provided in Article 5/1, 5/2/a-c-ç-f and Article 8/2/a of the PDPL, including but not limited to; processing being mandatory for the establishment or execution of a contract, processing being mandatory for the fulfillment of legal obligations, or processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• To the independent audit firms with which we have a contractual relationship,
• To the legal entities with which we have a dealership relationship,
• To the law firms with which the Company has a power of attorney relationship

and, if necessary, to your authorized representatives, regulatory and supervisory authorities, as well as other public institutions and organizations authorized to request your personal data, such as courts and enforcement offices.

Methods of Collecting Personal Data

Your personal data is collected through both automatic and non-automatic methods, verbally, in writing, or electronically, by legal entities with which we have dealership relationships, Sales Unit representatives and personnel, through means such as email, telephone, website, various forms, and similar methods. In addition to records kept in paper format, information shared by you, and documents sent to the Company by authorized public institutions and organizations and recorded are also included.

Veri Sahiplerinin Kanun Kapsamındaki Hakları

At any time, you can contact our company by:

• Learning whether your personal data is being processed or not,
• Requesting information if your personal data has been processed
• You have the right to learn the purposes of processing your personal data and whether they are being used for their intended purpose.
• You have the right to know the third parties to whom your personal data are transferred domestically or abroad.
• If your personal data are incomplete or inaccurately processed, you have the right to request their correction.
• You have the right to request the deletion or destruction of your personal data within the framework of the conditions envisaged in Article 7 of the PDPL.
• You have the right to request notification to third parties to whom your personal data has been transferred regarding processes carried out in accordance with Article 11, paragraphs (d) and (e) of the PDPL.
• Objecting to a decision that results in an unfavorable outcome for you based solely on automated processing of your processed data.
• Requesting compensation for damages in case you suffer harm due to the unlawful processing of your personal data.

You can request to exercise your rights. You can submit your requests regarding your rights and the implementation of GDPR to us through the following methods: You can send the application form by notary through registered mail or in person to the address "ZAFER MAH. 2355 SK. NO: 13 BUCA/ İZMİR". You can submit the application form using your secure electronic signature to the email address info@tansuurunleri.com.tr using your KEP address or the email address registered in the Company's data recording system.Our company will respond to such requests in writing. No fee will be charged for responses up to ten pages, and a processing fee of 1 Turkish Lira will be charged for each page exceeding ten pages.

As a data subject, in your application containing your explanations regarding the rights you have and wish to exercise, it is required that the requested matter is clear and understandable, and it relates to you personally. If you are acting on behalf of someone else, you will need to present a notarized power of attorney specifically authorizing you in this regard. Your applications must include your full name, signature, T.C. identification number, residential or business address, email address, telephone and fax numbers, and the subject matter of the request, as stipulated by the "Regulation on the Procedures and Principles of Application to the Data Controller." Applications that do not contain these elements will be rejected by our company.

The company reserves the right to make changes to this information text at any time due to the reasons arising from the KVKK, secondary regulations, and Board decisions. Any changes made to the information text will take effect immediately upon being communicated to you as of the date of notification.